CVE-2012-3533
31.08.2012, 20:55
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-middle (MITM) attack.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ovirt | ovirt | 3.1 |
| ovirt | ovirt-engine-cli | 𝑥 ≤ 3.1.0.5 |
| ovirt-engine-sdk | 3.1.0.5 | * |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References